book

Microsoft® Exchange Server 2010 Administration: Instant Reference

Name: Microsoft® Exchange Server 2010 Administration: Instant Reference
Author: Ken St. Cyr
ISBN: 9780470530504

by Ken St. Cyr

January 2010

Beginner to intermediate

552 pages

11h 2m

English

Sybex

Read now

Unlock full access

Copyright
Dear Reader,
Acknowledgments
About the Author
Introduction
Who Should Read This BookHow to Contact the Author
I. Getting Started
1. Deploying Exchange Servers
1.1. Prepare for Installation1.1.1. Plan the Exchange Deployment1.1.1.1. Understand the Server Roles1.1.1.2. Understand Exchange Requirements1.1.1.3. Design the Exchange Architecture1.1.1.4. Create a Deployment Plan1.1.2. Prepare Active Directory1.1.2.1. Install the Active Directory Management Tools1.1.2.1.1. Installing the Management Tools with the GUI1.1.2.1.2. Installing the Management Tools at the Command Prompt1.1.2.2. Modify the Active Directory Schema1.1.2.3. Prepare the Active Directory Forest1.1.2.4. Prepare the Active Directory Domains1.1.3. Prepare the Server1.1.3.1. Install.NET Framework 3.5 SP11.1.3.2. Install the Windows Management Framework1.1.3.3. Install the Required Server Components1.1.3.4. Configure the Net.Tcp Port Sharing Service1.2. Install Exchange Server 20101.2.1. Perform a Basic Installation1.2.1.1. Install Exchange Using the GUI1.2.1.2. Install Exchange Using the Command Prompt1.2.2. Perform an Advanced Installation1.2.2.1. Select Which Roles to Install1.2.2.2. Start the Advanced Installation1.2.2.3. Installing the Hub Transport Server Role1.2.2.4. Install the Client Access Server Role1.2.2.5. Install the Mailbox Server Role1.2.2.6. Install the Edge Transport Server Role1.2.3. Perform an Automated Installation1.2.3.1. Perform an Unattended Install1.2.3.2. Install Using an Answer File1.3. Perform Post-Installation Tasks1.3.1. Finalize the Installation1.3.1.1. Enter the Product Key1.3.1.2. Verify a Successful Installation1.3.1.3. Check the Health of the Server1.3.1.4. Install the Management Tools on a Different Computer1.3.1.4.1. Install the Management Tools Using the GUI1.3.1.4.2. Install the Management Tools Using the Command Prompt1.3.2. Configure Internet Mail Routing1.3.2.1. Create the DNS MX Records1.3.2.2. Create the Send Connector1.3.2.2.1. Create the Send Connector in the Exchange Management Console1.3.2.2.2. Create the Send Connector in the Exchange Management Shell1.3.2.3. Configure Receive Connector Permissions1.3.2.3.1. Configure the Receive Connector Permissions Using the Exchange Management Console1.3.2.3.2. Configure the Receive Connector Permissions Using the Exchange Management Shell
2. Using the Exchange Management Console and the Exchange Management Shell
2.1. Use the Exchange Management Console2.1.1. Understand the EMC Basics2.1.1.1. Navigate the Management Console2.1.1.2. Get Help on a Topic2.1.1.3. Export Data to a File2.1.1.4. Filter Results2.1.1.5. Change the Domain Controller Used for AD Operations2.1.2. Use Advanced Features2.1.2.1. Manage Additional Exchange Forests2.1.2.2. Collect Data about an Exchange Forest2.1.2.3. Work with the PowerShell Command Log2.1.2.3.1. Enable PowerShell Command Logging2.1.2.3.2. View the PowerShell Command Log2.1.2.4. Review a PowerShell Command Before Use2.2. Use the Exchange Management Shell2.2.1. Understand the Basics of PowerShell2.2.1.1. Execute Cmdlets2.2.1.1.1. Basic Cmdlet2.2.1.1.2. Cmdlet Parameters2.2.1.2. String Cmdlets Together2.2.1.3. Get Help on a Cmdlet2.2.1.4. Format the Output of a Command2.2.1.5. Test What a Command Will Do2.2.2. Script Administration Tasks2.2.2.1. Create PowerShell Scripts2.2.2.2. Use Variables in a Script2.2.2.3. Add Logic to a Script2.2.2.3.1. Loops2.2.2.3.2. Conditionals2.2.2.4. Run a Script Outside of PowerShell2.2.2.5. Schedule a Script to Run Later2.2.3. Manage Exchange Servers Remotely2.2.3.1. Allow an Administrator to Use PowerShell Remotely2.2.3.2. Connect Remotely Through PowerShell2.2.3.2.1. Connect Remotely with Your Current Log-In Credentials2.2.3.3. Connect Remotely with Different Credentials2.2.3.4. Overcome the Certificate Check2.2.3.4.1. Export the Certificate into a File2.2.3.4.2. Import the Certificate File into the Client2.2.3.4.3. Disable the Remote PowerShell Certificate Check2.2.3.4.4. Manually Disable the Certificate Check2.2.3.4.5. Disable the Certificate Check in Your PowerShell Profile2.2.3.4.6. Create a LaunchRemoteShell Script
3. Managing the Organization
3.1. Manage Relationships with Other Organizations3.1.1. Enable Data Sharing with Other Organizations3.1.1.1. Understand Federation Trusts3.1.1.2. Create the Federation Trust3.1.1.2.1. Create the Federation Trust in the Exchange Management Console3.1.1.2.2. Create the Federation Trust in the Exchange Management Shell3.1.1.3. Configure DNS for Federation3.1.1.4. Configure the Organization Identifier3.1.1.4.1. Add an Accepted Domain3.1.1.4.2. Configure the Organization Identifier3.1.1.5. Create an Organizational Relationship3.1.1.5.1. Create an Organizational Relationship Using the Exchange Management Console3.1.1.5.2. Create an Organizational Relationship Using the Exchange Management Shell3.1.2. Define Which Information Users Can Share3.1.2.1. Create a Sharing Policy3.1.2.1.1. Create a Sharing Policy with the Exchange Management Console3.1.2.1.2. Create a Sharing Policy in the Exchange Management Shell3.1.2.2. Apply Sharing Policies to Recipients3.1.2.2.1. Apply a Policy to Multiple Mailboxes Using the Exchange Management Console3.1.2.2.2. Configure the Sharing Policy for a Mailbox3.2. Manage Address Lists3.2.1. Manage Address List Content3.2.1.1. Create an Address List3.2.1.1.1. Create an Address List in the Exchange Management Console3.2.1.1.2. Create an Address List in the Exchange Management Shell3.2.1.2. Use a Custom Recipient Filter3.2.1.3. Restrict Access to an Address List3.2.1.4. Retrieve the Members of an Address List3.2.1.5. Force an Address List to Update Using the Exchange Management Shell3.2.1.6. Modify the Address List Template for Outlook Clients3.2.2. Manage Address List Distribution3.2.2.1. Create an Offline Address Book3.2.2.1.1. Create an OAB in the Exchange Management Console3.2.2.1.2. Create an OAB in the Exchange Management Shell3.2.2.2. Change the Default OAB for New Users3.2.2.3. Distribute an OAB to Specific Users3.2.2.3.1. Apply an OAB to a Mailbox Database3.2.2.3.2. Specify an OAB for an Individual User Using the Exchange Management Shell3.2.2.4. Secure Address Book Distribution3.2.2.4.1. Configure an SSL Connection Using the IIS Manager3.2.2.4.2. Configure an SSL Connection Using the Exchange Management Shell
4. Administering Recipients
4.1. Manage Recipient Accounts4.1.1. Manage User Accounts4.1.1.1. Create a New User with a Mailbox4.1.1.1.1. Use the Exchange Management Console to Create a New User with a Mailbox4.1.1.1.2. Use the Exchange Management Shell to Create a Room Mailbox4.1.1.2. Create a Mail-Enabled Contact4.1.1.2.1. Create a Mail-Enabled Contact in the Exchange Management Console4.1.1.2.2. Create a Mail-Enabled Contact in the Exchange Management Shell4.1.1.3. Mail-Enable an Existing User4.1.1.3.1. Mail-Enable an Existing User in the Exchange Management Console4.1.1.3.2. Mail-Enable an Existing User in the Exchange Management Shell4.1.1.4. Modify a User's Contact Information4.1.1.4.1. Modify Contact Information in the Exchange Management Console4.1.1.4.2. Modify Contact Information in the Exchange Management Shell4.1.1.5. Hide a User from the Address Lists4.1.1.5.1. Hide a User from Address Lists in the Exchange Management Console4.1.1.5.2. Hide a User from Address Lists in the Exchange Management Shell4.1.2. Manage Resource Accounts4.1.2.1. Convert an Existing Mailbox into a Resource Mailbox4.1.2.2. Create a Mailbox for a Conference Room4.1.2.2.1. Create a Room Mailbox in the Exchange Management Console4.1.2.2.2. Create a Room Mailbox in the Exchange Management Shell4.1.2.3. Book Resources Automatically4.1.2.3.1. Turn On Automatic Resource Booking in the Exchange Management Console4.1.2.3.2. Control Automatic Resource Booking in the Exchange Management Shell4.1.2.4. Customize the Response to Resource Requests4.1.2.4.1. Customize the Response Message in the Exchange Management Console4.1.2.4.2. Customize the Response Message in the Exchange Management Shell4.1.3. Manage Recipient Addresses4.1.3.1. Add an Email Address Manually4.1.3.1.1. Add an Email Address in the Exchange Management Console4.1.3.1.2. Add an Email Address in the Exchange Management Shell4.1.3.2. Create an Email Address Policy4.1.3.2.1. Configure a Predefined Email Address Policy in the Exchange Management Console4.1.3.2.2. Build a Custom Email Address Policy in the Exchange Management Shell4.1.3.3. Apply an Address Policy4.1.3.3.1. Apply an Address Policy Using the Exchange Management Console4.1.3.3.2. Apply an Address Policy Using the Exchange Management Shell4.2. Manage Recipient Mailboxes4.2.1. Manage Mailbox Growth4.2.1.1. Impose Storage Quotas on Specific Users4.2.1.1.1. Impose a Storage Quota on a Specific User with the Exchange Management Console4.2.1.1.2. Impose a Storage Quota on a Specific User with the Exchange Management Shell4.2.1.2. Set Message Size Limits on a User4.2.1.2.1. Set Message Size Limits on a Mailbox Using the Exchange Management Console4.2.1.2.2. Set Message Size Limits on a Mailbox Using the Exchange Management Shell4.2.2. Manage Mailbox Access4.2.2.1. Disable a User's Mailbox4.2.2.1.1. Disable a Mailbox Using the Exchange Management Console4.2.2.1.2. Disable a Mailbox Using the Exchange Management Shell4.2.2.2. Give a User Access to a Mailbox4.2.2.2.1. Give a User Access to a Mailbox Using the Exchange Management Console4.2.2.2.2. Give Users Access to a Mailbox Using the Exchange Management Shell4.2.3. Manage Mailbox Data4.2.3.1. Obtain Information About a User's Mailbox4.2.3.2. Export Messages from a User's Mailbox4.2.3.2.1. Export Messages Using the Exchange Management Console4.2.3.2.2. Export Messages Using the Exchange Management Shell4.2.3.3. Import Data into a User's Mailbox from PST Files4.2.3.4. Move a Mailbox to a Different Database4.2.3.4.1. Move a Mailbox to a Different Local Database Using the Exchange Management Console4.2.3.4.2. Move a Mailbox to a Different Database Using the Exchange Management Shell4.2.3.4.3. Verify That a Move Request Was Completed4.2.3.4.4. Clear an Uncompleted Move Request4.3. Manage Distribution Groups4.3.1. Manage Basic Distribution Group Functionality4.3.1.1. Create a Distribution Group4.3.1.1.1. Create a Distribution Group in the Exchange Management Console4.3.1.1.2. Create a Distribution Group in the Exchange Management Shell4.3.1.2. Mail-Enable an Existing Group4.3.1.2.1. Mail-Enable an Existing Group in the Exchange Management Console4.3.1.2.2. Mail-Enable an Existing Group in the Exchange Management Shell4.3.1.3. Manage Distribution Group Membership4.3.1.3.1. Add and Remove Distribution Group Members Using the Exchange Management Console4.3.1.3.2. Add or Remove Distribution Group Membership Using the Exchange Management Shell4.3.2. Administer Access to Distribution Groups4.3.2.1. Give Management Responsibility for a Distribution Group to a User4.3.2.1.1. Add Distribution Group Managers Using the Exchange Management Console4.3.2.1.2. Specify Distribution Group Managers Using the Exchange Management Shell4.3.2.2. Moderate Messages Sent to a Distribution Group4.3.2.2.1. Set Up Message Moderation Using the Exchange Management Console4.3.2.2.2. Set Up Message Moderation Using the Exchange Management Shell4.3.3. Configure Distribution Groups That Update Automatically4.3.3.1. Create a Dynamic Distribution Group4.3.3.1.1. Create a Dynamic Distribution Group Using the Exchange Management Console4.3.3.1.2. Create a Dynamic Distribution Group Using the Exchange Management Shell4.3.3.2. View the Membership of a Dynamic Distribution Group4.3.3.2.1. View the Members of a Dynamic Distribution Group Using the Exchange Management Console4.3.3.2.2. View the Members of a Dynamic Distribution Group Using the Exchange Management Shell

II. Managing Exchange Server Roles
5. Managing Client Access
5.1. Manage Web-Based Email Access5.1.1. Configure OWA Connectivity5.1.1.1. Configure OWA URLs5.1.1.1.1. Set the Same External Name for All Services on a Client Access Server5.1.1.1.2. Configure an External URL on OWA Manually5.1.1.1.3. Configure the Exchange Control Panel External URL5.1.1.2. Redirect the Default Server URL to OWA5.1.1.3. Redirect from HTTP to HTTPS5.1.2. Configure OWA Features5.1.2.1. Modify Basic OWA Features5.1.2.1.1. Modify Segmentation Options in the Exchange Management Console5.1.2.1.2. Modify Segmentation Options in the Exchange Management Shell5.1.2.2. Manage Web-Based Document Viewing5.1.2.2.1. Use the Exchange Management Console to Enable Web-Ready Document Viewing5.1.2.2.2. Use the Exchange Management Shell to Enable Web-Ready Document Viewing5.2. Manage Access for Mobile Devices5.2.1. Configure Mobile Device Connectivity5.2.1.1. Enable or Disable Exchange ActiveSync5.2.1.2. Enable Mobile Device Access for Users5.2.1.2.1. Use the Exchange Management Console to Enable or Disable Mobile Device Access5.2.1.2.2. Use the Exchange Management Shell to Enable or Disable Mobile Device Access5.2.1.3. Restrict Devices5.2.2. Manage Mobile Device Features and Settings5.2.2.1. Use Mobile Device Policies5.2.2.1.1. Create a Mobile Device Policy5.2.2.1.2. Configure Features and Settings5.2.2.1.3. Set a Mobile Device Policy on One or More Users5.2.2.2. Disable Mobile Device Functionality5.2.2.2.1. Use the Exchange Management Console to Enable or Disable Mobile Device Features5.2.2.2.2. Use the Exchange Management Shell to Enable or Disable Mobile Device Features5.2.2.3. Manage Synchronization Settings5.2.2.3.1. Use the Exchange Management Console to Manage Synchronization Settings5.2.2.3.2. Use the Exchange Management Shell to Manage Synchronization Settings5.2.3. Protect Mobile Devices5.2.3.1. Enforce Password Requirements5.2.3.1.1. Use the Exchange Management Console to Change Password Requirements5.2.3.1.2. Use the Exchange Management Shell to Change Password Requirements5.2.3.2. Recover the Password for a Device5.2.3.3. Control Application Usage5.2.3.3.1. Use the Exchange Management Console to Disable Mobile Device Applications5.2.3.3.2. Use the Exchange Management Shell to Disable Mobile Device Applications5.2.3.4. Remotely Wipe a Device5.2.3.4.1. Use the Exchange Management Console to Remotely Wipe a Mobile Device5.2.3.4.2. Use the Exchange Management Shell to Remotely Wipe a Mobile Device5.2.4. Monitor Mobile Device Usage5.2.4.1. Retrieve a List of Devices for a User5.2.4.2. Generate Device Reports5.2.4.2.1. Generate Reports for a Single Day5.2.4.2.2. Change How Often New Log Files Are Created5.3. Manage Outlook Client Access5.3.1. Configure Outlook Anywhere5.3.1.1. Enable Outlook Anywhere5.3.1.1.1. Configure Outlook Anywhere in the Exchange Management Console5.3.1.1.2. Enable Outlook Anywhere Using the Exchange Management Shell5.3.1.2. Configure SSL Offloading5.3.1.2.1. Enable SSL Offloading Using the Exchange Management Console5.3.1.2.2. Modify SSL Offloading Using the Exchange Management Shell5.3.1.3. Modify the Authentication Method5.3.1.3.1. Configure the Authentication Method Using the Exchange Management Console5.3.1.3.2. Configure the Authentication Method Using the Exchange Management Shell5.3.2. Configure Automatic Client Configuration5.3.2.1. Understand AutoDiscover for Outlook Anywhere5.3.2.2. Configure a DNS SRV Record for AutoDiscover5.3.2.3. Test AutoDiscover Configuration in the Exchange Management Shell5.3.3. Configure Access for Third-Party Clients5.3.3.1. Enable the POP3 and IMAP4 Service5.3.3.2. Turn On POP3 and IMAP4 for Users5.3.3.3. Use Certificates with POP3 and IMAP4
6. Managing Message Routing
6.1. Manage the Routing Topology6.1.1. Configure How Exchange Sends and Receives Email6.1.1.1. Change the Port and IP Address on Which a Server Receives Mail6.1.1.1.1. Use the Exchange Management Console to Change the Port and IP Address of a Receive Connector6.1.1.1.2. Use the Exchange Management Shell to Change the Port and IP Address of a Receive Connector6.1.1.2. Configure How Mail Is Routed to a Specific Email Domain6.1.1.2.1. Use the Exchange Management Console to Configure a Send Connector to Use a Smart Host6.1.1.2.2. Use the Exchange Management Shell to Configure a Send Connector to Use a Smart Host6.1.2. Manage Message Flow Inside the Forest6.1.2.1. Examine the Active Directory Site Topology6.1.2.1.1. View the Site Topology Using the Sites and Services Tool6.1.2.1.2. Use the Exchange Management Shell to Get Site Topology Information6.1.2.2. Modify How Mail Flows Through AD Sites6.1.2.3. Force Mail to Route Through a Hub Site6.1.3. Manage Internet Message Flow6.1.3.1. Configure the Domains for Which Exchange Is Responsible6.1.3.1.1. Use the Exchange Management Console to Configure an Accepted Domain6.1.3.1.2. Use the Exchange Management Shell to Configure an Accepted Domain6.1.3.2. Configure the DNS Records for Receiving Email6.1.3.3. Manage Message Settings for Remote Domains6.1.3.3.1. Define a Remote Domain6.1.3.3.2. Configure Remote Domains6.1.3.4. Configure Mail to Flow Through an External Gateway6.1.3.5. Configure a Hub Transport Server to Receive Internet Email6.2. Manage Mail Transport Servers6.2.1. Administer Transport Server Message Queues6.2.1.1. Move the Message Queue Database to a Different Location6.2.1.2. Force a Message Queue to Retry6.2.1.3. Export Messages Out of a Queue Using the Exchange Management Shell6.2.1.4. Suspend a Message Queue6.2.2. Manage the Edge Transport Server6.2.2.1. Subscribe an Edge Transport Server to an Active Directory Site6.2.2.1.1. Step 1: Ensure That the Correct Ports Are Open in Your Firewall6.2.2.1.2. Step 2: Ensure That Name Resolution Works Between the Hub Transport Servers in the Site and the Edge Transport Server6.2.2.1.3. Step 3: Export the Subscription XML File from the Edge Transport Server6.2.2.1.4. Step 4: Create the Subscription on the Hub Transport Server and Import the XML File That Was Exported in Step 36.2.2.2. Force the Synchronization of Edge Transport Server Data6.2.2.3. Test Edge Transport Server Synchronization
7. Managing Mailbox Databases
7.1. Perform Essential Database Management7.1.1. Manage the Database Files7.1.1.1. Create a New Mailbox Database7.1.1.2. Mount a Mailbox Database7.1.1.2.1. Check Whether a Database Is Mounted Using the Exchange Management Console7.1.1.2.2. Mount a Mailbox Database Using the Exchange Management Console7.1.1.2.3. Mount and Dismount Mailbox Databases Using the Exchange Management Shell7.1.1.3. Move a Database to a Different Location7.1.1.4. Configure the Online Maintenance Window7.1.1.4.1. Adjust the Online Maintenance Window7.1.1.4.2. Change the Timing for Database Checksumming7.1.2. Manage the Transaction Log Files7.1.2.1. Move the Transaction Logs to a Different Location7.1.2.2. Reuse Transaction Logs7.1.2.2.1. Set Up Circular Logging Using the Exchange Management Console7.1.2.2.2. Set Up Circular Logging Using the Exchange Management Shell7.1.3. Manage Database Settings7.1.3.1. Configure Exchange Search7.1.3.1.1. Enable and Disable Exchange Search7.1.3.1.2. Rebuild the Search Index7.1.3.2. Configure Limits on a Database7.1.3.3. Associate a Client Access Server with a Mailbox Database7.2. Manage Database Redundancy7.2.1. Configure Redundant Databases7.2.1.1. Create a Database Availability Group7.2.1.2. Change the Witness Server7.2.1.3. Add Servers to a DAG7.2.1.4. Replicate Databases to Additional Servers7.2.1.5. Configure the Network Used by an Availability Group7.2.1.5.1. Create a DAG Network7.2.1.5.2. Dedicate a DAG Network to Replication or MAPI Only7.2.2. Manage Database Replication7.2.2.1. Manually Seed a Database Copy7.2.2.1.1. Manual Seeding Through Exchange7.2.2.1.2. Manual Seeding by Copying the File7.2.2.2. Pause Database Replication7.2.2.2.1. Stop Database Replication7.2.2.2.2. Resume Database Replication7.2.2.3. Modify the Replication Settings of a Database7.2.2.4. View the Current Status of Replication7.2.3. Manage Database Availability7.2.3.1. Perform a Database Switchover7.2.3.2. Perform a Database Failover
8. Managing Public Folders
8.1. Perform Essential Public Folder Management8.1.1. Manage Public Folder Content8.1.1.1. Understand the Public Folder Management Console8.1.1.1.1. Launch the Public Folder Management Console8.1.1.1.2. Modify the Information Shown in the Results Pane8.1.1.2. Create a New Public Folder8.1.1.2.1. Create a New Public Folder Using the Public Folder Management Console8.1.1.2.2. Create a New Public Folder Using the Exchange Management Shell8.1.1.2.3. Create a New Public Folder Using Outlook8.1.1.3. Allow a Public Folder to Receive Mail8.1.1.3.1. Mail-Enable a Public Folder Using the Public Folder Management Console8.1.1.3.2. Mail-Enable or Disable a Public Folder Using the Exchange Management Shell8.1.1.4. Gather the Statistics of a Public Folder8.1.1.5. Maintain Per-User Message Read State8.1.1.6. Impose Size Limits and Warnings on a Folder8.1.2. Define Public Folder Permissions8.1.2.1. Grant Users Access to a Public Folder8.1.2.2. Remove Access to a Public Folder8.1.2.3. Manage Public Folder Administrators8.1.2.3.1. Add Administrators to a Public Folder8.1.2.3.2. Remove Administrators from a Public Folder8.1.2.4. List the Permissions on a Folder8.1.2.4.1. View Client Permissions8.1.2.4.2. View Administrator Permissions8.1.3. Configure Client Connectivity8.1.3.1. Modify How Clients Choose a Public Folder Server8.1.3.1.1. Modify the Custom Referral List Using the Exchange Management Console8.1.3.1.2. Modify the Custom Referral List Using the Exchange Management Shell8.1.3.2. Change the Default Public Folder Database8.2. Manage Public Folder Databases8.2.1. Configure Public Folder Databases8.2.1.1. Create a New Public Folder Database8.2.1.2. Impose Limits on all Public Folders in a Database8.2.2. Maintain Public Folder Databases8.2.2.1. Manage the Database Maintenance Schedule8.2.2.2. Move Public Folder Database Files8.2.2.3. Delete a Public Folder Database8.3. Manage Public Folder Replication8.3.1. Configure Replication Parameters8.3.1.1. Change the Size of Replication Messages8.3.1.2. Define the Replication Schedule8.3.1.2.1. Change the Replication Schedule on a Database8.3.1.2.2. Define a Custom Replication Schedule on a Public Folder8.3.2. Manage Replication8.3.2.1. Add a Replica Server8.3.2.2. Move Public Folders to a Different Server Using PowerShell Scripts8.3.2.3. Suspend and Resume Public Folder Content Replication8.3.2.4. Force Public Folder Replication8.3.2.4.1. Force Public Folder Hierarchy Replication8.3.2.4.2. Force Public Folder Content Replication
III. Mitigating Risk
9. Administering Mailbox Content
9.1. Meet Message Retention Compliance9.1.1. Enforce Records Management9.1.1.1. Use Managed Folders9.1.1.1.1. Create Managed Folders9.1.1.1.2. Control the Lifespan of Messages9.1.1.1.3. Configure Managed Folder Policies9.1.1.1.4. Modify the Managed Folder Processing Schedule9.1.1.2. Use Retention Tags9.1.1.2.1. Create Retention Tags9.1.1.2.2. Link Retention Tags to Retention Policies9.1.1.2.3. Apply Retention Policies to Mailboxes9.1.1.3. Suspend Retention Policies on a Mailbox9.1.1.4. Convert from Managed Folders to Retention Tags9.1.2. Archive Email9.1.2.1. Create an Archive for a User9.1.2.2. Modify the Archive Quota9.1.2.3. Retrieve Statistical Data on an Archive9.1.2.4. Import PSTs into an Archive9.1.3. Keep a Record of Email Communications9.1.3.1. Configure Journaling for an Entire Mailbox Database9.1.3.2. Configure Journaling for Specific Users9.1.3.3. Secure the Journal Mailbox9.2. Protect and Disclose Information9.2.1. Perform Search and Discovery of Email9.2.1.1. Create a New Discovery Search9.2.1.2. Rerun a Discovery Search9.2.1.3. View the Results of a Discovery Search9.2.1.4. Create a Discovery Mailbox9.2.1.5. Allow People to Search Mailboxes9.2.1.5.1. Delegate Discovery Management in the ECP9.2.1.5.2. Delegate Discovery Management in the EMS9.2.2. Add Disclaimers and Ensure Message Integrity9.2.2.1. Add Automatic Disclaimers to Messages9.2.2.2. Place a Litigation Hold on a Mailbox9.3. Monitor and Restrict Communication9.3.1. Perform Basic Message Policy Configuration9.3.1.1. Understand Transport Rules9.3.1.2. Configure Transport Rules9.3.1.3. Disable Transport Rules9.3.2. Apply Common Monitoring and Restriction Scenarios9.3.2.1. Restrict Communications with an Ethical Wall9.3.2.2. Enforce Email Approval Based on Keyword9.3.2.3. Quietly Monitor Communications Between Certain Parties
10. Maintaining Reliability and Availability
10.1. Utilize the Availability Options for Servers Based on Role10.1.1. Load-Balance Client Access Servers10.1.1.1. Install the Network Load Balancing Feature10.1.1.2. Create the NLB Cluster10.1.1.2.1. Create the Cluster with the First Node10.1.1.2.2. Add Additional Nodes to the Cluster10.1.1.3. Configure the Client Access Array in Exchange10.1.2. Increase Mailbox Database Availability10.1.2.1. Understand Database Availability Options10.1.2.1.1. Understand the Basics of DAGs10.1.2.1.2. Determine How Databases Fail Over10.1.2.2. Implement Database Availability Groups10.1.3. Implement Redundant Transport Servers10.1.3.1. Implement Redundancy for Internal Message Routing10.1.3.2. Implement Redundancy for External Message Routing10.1.3.2.1. Add Redundancy for Sending External Messages10.1.3.2.2. Add Redundancy for Receiving Internet Mail10.2. Back Up Exchange10.2.1. Develop an Effective Backup Strategy10.2.1.1. Understand the Reasons for Backups10.2.1.2. Determine Recoverability Goals10.2.1.3. Decide on a Backup Schedule10.2.1.4. Consider Backup Alternatives in Exchange10.2.2. Perform Backups with the Windows Server Backup Tool10.2.2.1. Install Windows Server Backup10.2.2.2. Perform a One-Time Manual Backup10.2.2.3. Perform Automated Backups10.3. Recover Data10.3.1. Recover Databases with the Windows Server Backup Tool10.3.1.1. Restore the Database from Backup10.3.1.2. Mount a Database Restored to an Alternate Location10.3.2. Recover Mailboxes10.3.2.1. Use Deleted Mailbox Retention10.3.2.1.1. Adjust the Deleted Mailbox Retention Time10.3.2.1.2. Reconnect a Disconnected Mailbox Using the Exchange Management Shell10.3.2.1.3. Reconnect a Disconnected Mailbox Using the Exchange Management Console10.3.2.2. Use a Recovery Database10.3.2.2.1. Create a Recovery Database Using the Exchange Management Shell10.3.2.2.2. Restore the Mailbox Database from Backup10.3.2.2.3. Repair and Mount the Restored Database10.3.2.2.4. Restore the Mailbox10.3.2.3. Use Lagged Database Copies10.3.2.3.1. Configure a Lagged Database Copy Using the Exchange Management Shell10.3.2.3.2. Recover from a Lagged Copy10.3.3. Recover Deleted Messages10.3.3.1. Understand Single-Item Recovery10.3.3.2. Configure Single-Item Recovery10.3.3.2.1. Enable Single Item Recovery on a Mailbox Using the Exchange Management Shell10.3.3.2.2. Configure the Retention Period for Single-Item Recovery Using the Exchange Management Shell10.3.3.3. Recover a Deleted Message
11. Monitoring Health and Performance
11.1. Keep Exchange Healthy11.1.1. Ensure That Mail Flows Freely11.1.1.1. Check Message Queues11.1.1.1.1. Suspend and Remove Messages from Queues11.1.1.1.2. Export a Message from the Queue Using the Exchange Management Shell11.1.1.1.3. Resubmit a Queued Message Using the Exchange Management Shell11.1.1.2. Use Protocol Logging to Diagnose Transport Problems11.1.1.2.1. Enable Protocol Logging on Receive Connectors11.1.1.2.2. Enable Protocol Logging on Send Connectors11.1.1.2.3. Configure the Location of the Protocol Logs11.1.1.2.4. Read the Protocol Logs11.1.1.3. Track Message Flow11.1.1.3.1. View the Log Files Directly11.1.1.3.2. Use the Tracking Log Explorer11.1.1.3.3. Track Messages in the EMS11.1.2. Verify Exchange Server Health11.1.2.1. Monitor the Event Logs11.1.2.1.1. View Relevant Events11.1.2.1.2. Specify the Level of Logging Detail11.1.2.2. Monitor Disk Space on Database and Log Drives11.1.2.3. Ensure That Services Are Running11.1.2.4. Use the Test Cmdlets in the Exchange Management Shell11.1.3. Use the Exchange Best Practices Analyzer11.2. Track Exchange Performance11.2.1. Use the Performance Tools Available11.2.1.1. Run the Performance Troubleshooter11.2.1.2. Analyze Performance with the Performance Monitor11.2.1.2.1. View Real-Time Performance Statistics11.2.1.2.2. Capture and Save Performance Statistics for Analysis11.2.2. Test the Performance Limitations in a Lab11.2.2.1. Stress-Test the Databases11.2.2.1.1. Install Jetstress11.2.2.1.2. Run Jetstress11.2.2.2. Simulate Client Workload11.2.2.2.1. Install LoadGen11.2.2.2.2. Use LoadGen
12. Securing Exchange Server
12.1. Configure Security for Exchange Servers12.1.1. Secure Client Access Servers12.1.1.1. Configure a Certificate from a Certification Authority12.1.1.1.1. Obtain a Certificate12.1.1.1.2. Install the Certificate12.1.1.1.3. Ensure That Clients Trust the Issuer12.1.2. Secure the Transport Layer12.1.2.1. Define a Transport Security Model12.1.2.2. Install Antispam Functionality on Hub Transport Servers12.2. Manage Permissions12.2.1. Understand the Exchange Server 2010 Administrative Model12.2.1.1. Understand Role-Based Access Control12.2.1.2. Review the Built-In Roles and Role Groups12.2.2. Delegate Role-Based Permissions12.2.2.1. Customize Roles12.2.2.2. Assign Roles to Administrators12.2.2.2.1. Determine If You Can Use an Existing Role Group12.2.2.2.2. Use a Customized Role Group12.2.2.2.3. Add Administrators to a Role Group12.2.2.3. Assign Roles to Users12.2.2.3.1. Create a New Role Assignment Policy12.2.2.3.2. Add Roles to the Role Assignment Policy12.2.2.3.3. Assign the Role Assignment Policy to Mailboxes12.3. Configure Message Hygiene Options12.3.1. Battle Unwanted Mail12.3.1.1. Understand the Spam Confidence Level12.3.1.2. Use Spam Quarantine12.3.1.2.1. Configure the Quarantine Mailbox12.3.1.2.2. Monitor the Quarantine Mailbox12.3.1.2.3. Adjust the SCL Thresholds12.3.1.3. Block Message Attachments12.3.2. Protect Against Unwanted Mail Sources12.3.2.1. Block Mail from Specific IP Addresses12.3.2.2. Verify That Senders Are Valid12.3.2.2.1. Prevent Spoofed Messages12.3.2.2.2. Block Messages from Certain People or Organizations12.3.2.3. Prevent Internet Users from Sending Email to Distribution Groups

Content preview from Microsoft® Exchange Server 2010 Administration: Instant Reference

Chapter 12. Securing Exchange Server

IN THIS CHAPTER, YOU WILL LEARN TO:

CONFIGURE SECURITY FOR EXCHANGE SERVERS (Pages 480–487)
- Secure Client Access Servers (Page 480)
- Secure the Transport Layer (Page 486)
MANAGE PERMISSIONS (Pages 487–498)
- Understand the Exchange Server 2010 Administrative Model (Page 488)
- Delegate Role-Based Permissions (Page 491)
CONFIGURE MESSAGE HYGIENE OPTIONS (Pages 498–508)
- Battle Unwanted Mail (Page 498)
- Protect Against Unwanted Mail Sources (Page 502)

Configure Security for Exchange Servers

One of the benefits of having servers with multiple roles in Exchange is that each role has its own type of functionality. This means the servers can all be secured in a way that best suits their purpose. Securing Exchange is a server-specific ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Microsoft® Exchange Server 2007: Implementation and Administration

Publisher Resources

ISBN: 9780470530504Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Microsoft® Exchange Server 2010 Administration: Instant Reference

by Ken St. Cyr

Chapter 12. Securing Exchange Server

Configure Security for Exchange Servers

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.